ece69b0c13f4cfe9a4824112fe86313e_JaffaCakes118 | Triage

Sharing

General

Target

ece69b0c13f4cfe9a4824112fe86313e_JaffaCakes118
Size

59KB
MD5

ece69b0c13f4cfe9a4824112fe86313e
SHA1

ae256786aae576bfd183f58a16ab08fd9b8515e6
SHA256

47b24f775b16609ca1a6c951a9089d75409debd68d7bf4481ddf47a2ebd8e116
SHA512

3bfff798ea02657477fcdbe61b555a64f1ab17b787c705a2fcff26f17eef4651115f16be50244636a17c9e34a0ae8fc920621c6c9639bd1cf47150f64bd48214
SSDEEP

768:wewuF1vGbzzHWqCPGAG97Z1+bU7qa70q7144Xg5wAP66R5q:X1F0HCK1+bU7x7qwASeI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ece69b0c13f4cfe9a4824112fe86313e_JaffaCakes118

Files

ece69b0c13f4cfe9a4824112fe86313e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f0964f7d12948ade7e4347cd8aa57bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
GetProcAddress
LoadLibraryA
CreateEventA
VirtualProtect
LockResource
LoadResource
FindResourceA
LocalFree
VirtualAllocEx
GetCurrentProcessId
ExitProcess
GetComputerNameA
GetModuleHandleW
GetModuleHandleA
CreateMutexA
ResumeThread
LocalAlloc
GetCurrentProcess

user32

GetActiveWindow
wsprintfA
FindWindowA
GetWindow
ShowWindow

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ